2PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Contents
Client-side configuration and installation of SAP Business Client for Desktop 6.5 together with SAPGUI for Windows 7.50
• UI Landscape• System connections• Client configuration• Provisioning• Security settings
Server-side configuration• Enable NWBC core functionality• Activate Side Panel• User menus – role maintenance
Further information / links
3PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
4. Create and distributeInternet Explorersecurity options
Installing SAP Business Client for DesktopGeneral approach
Client-side
2. Create and distribute systemconnections* and clientconfiguration
SAP UI LandscapeNwbcOptions.xmlRegistry entries
5. Configure AS ABAP backend
Server-side
HTTP framework, required ICF servicesauthentication, SNC,/UI2/NWBC_CFG_CUST
6. Define user roles
Software Download
1. Download SAPBusiness ClientfromSAP ONE SupportLaunchpad (SAPSoftware DownloadCenter)
3. Install SAP Business Client forDesktop together with SAP GUIfor Windows 7.50
*Fiori Launchpad connection, NWBC connection, SAP logon connection, and SAP shortcut
5PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Downloading SAP Business Client 6.5
Download it from the SAP One SupportLaunchpad.
Download
7PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
SAP UI Landscape as default*
LANDSCAPE .XML FOR SAPBUSINESS CLIENT AND SAP GUI FORWINDOWS
As an administrator, you can use the sameinfrastructure to define and distribute systemconnections for usage by SAP GUI forWindows and SAP Business Client.
* SAP UI landscape has been introduced with SAP Business Client 6.0, as well affective for 6.5. With SAP GUI 7.50 SAP UI Landscape formatto store the connection information is now default
SAP UI LANDSCAPE
ADMINCONFIG
USERCONFIG
COMMONCONFIGURATION
8PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Creating system connections(1) SAP UI Landscape
For both SAP Business Client and SAP GUI for Windows 7.50, datarequired for system logon is defined based on the new SAP UI Landscapefiles. The administrator configuration file typically contains:
• Message server hosts and ports• Routers• Predefined SAP Fiori Launchpad connections• Predefined SAP Business Client connections• Predefined SAP GUI connections• Predefined search providers
For information on the migration of the previous connection configuration,see:• Help Portal: Migration of Configuration Data• SAP Note 2075150
The SAP UI Landscape administrator configuration file replaces former NWBC configuration settings forsystem connections and search providers in %ALLUSERSPROFILE%\SAP\NWBC\NwbcOptions.xml
2) System Connection
9PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Creating system connections(2) New Connection Type: Fiori launchpad
With the new fiori launchpad connection SAP Business client acts as aWindows-based desktop browser for the SAP Fiori launchpad with theability to launch classic Dynpro applications (SAP GUI transactions):
• Protocol is either http:// or https://
• Syntax for the URL is as follows:http(s)://<server>.<domain>.<ext>:<port>/<path>
• Default path:/sap/bc/ui5_ui5/ui2/ushell/shells/abap/FioriLaunchpad.html
For information on the SAP Fiori Launchpad configuration, see:• Help Portal: Setting Up the Launchpad• Help Portal: Customize the Launchpad URL
2) System Connection
SAP Fiori launchpad
10PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Distributing system connectionsProvision options for administrator configuration file
PullUI client retrieves administrator configuration file from a central storagesuch as a remote share or a Web service platform
PushAdministrator distributes the administrator configuration file from hiscentral data storage repository to the clients
NWBC, SAP GUI for Windows,SAP GUI for Java
%APPDATA%\SAP\Common\SAPUILandscape.xml
Read and Write:User configuration file
%ProgramData%/SAP/<filename>.xml
Retrieves datafromadministratorconfiguration file
Remote Share:\\<Server>\<...>\UILandscape.xml
Client initiates pull request.
Web Service Access
NWBC, SAP GUI for Windows,SAP GUI for Java
%APPDATA%\SAP\Common\SAPUILandscape.xmlCache and Read:
Administratorconfiguration file Read and Write:
User configuration file
2) Distributing Connection
More information:• Help Portal: Provision of Administrator Configuration File• SAP Front End Installation Guide, “Configuration with SAP NetWeaver Business Client”
11PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Creating and distributing client configurationNwbcOptions.xml and registry entries 2) Client Configuration
Administrator configuration, such as user settings are located in the following folder:%ALLUSERSPROFILE%\SAP\NWBC• Predefine default values (changeable by end-users)• Prevent end-users from changing values• Prevent end-users from creating new entries• Control runtime behaviorProvisioning options:Push to clients (%ALLUSERSPROFILE%\SAP\NWBC\NwbcOptions.xml) or provide centrally,once defining the location in %ALLUSERSPROFILE%\SAP\NWBC\NwbcRemoteOptions.xmlFor more information, see• Comments in the configuration file template
%ALLUSERSPROFILE%\SAP\NWBC\NwbcOptions.xml.template• Help Portal: SAP Business Client Settings (NWBCOptions.xml)• Help Portal: Administrator Configuration Tips
SAP UI landscape options• Set registry entries – separately or together with installation via installation server• For more information about the installation server, see
SAP Front End Installation Guide, “Configuring Packages and Scripting Events”
13PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Installing SAP Business Client1/2
We recommend to install SAP Business Client togetherwith SAP GUI for Windows 7.50.
You will find the installation on the 7.50 Compilation DVD(download via SAP Support Portal).
For more information, see:• Front-End Installation Guide, which is stored in the
Docu directory both on the CD and the SAPNetWeaver SAPSetup - SAPs Front-End SoftwareDeployment Tool guide (Workstation InstallationHelp.chm)
• Help Portal: Installing SAP Business Client with SAPGUI
2) Install
15PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Distributing Internet Explorer security options
Make sure server addresses corresponding to the system connectionsare covered by the Local intranet or the Trusted sites zone.For more information, see Help Portal: Security Zones in Internet Explorer
SAP Business Client renders HTML content using the Internet Explorer and thus uses the Internet Explorer zone model.The Internet Explorer zone model is also used for navigation to SAP GUI transactions.
4) Security
5.1 Configuring the AS ABAP back end:SAP Business Client core features1. Configure HTTP(S) communication, authentication, SSL and SNC on the AS ABAP
2. Activate the NWBC server runtime
3. Make system-specific settings (customizing, whitelist)
18PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
5.1.1 General server configurationProposal
Step 1: Enable HTTP(S) communication – configure ICMHelp Portal: Administration of the Internet Communication ManagerHelp Portal: HTTP(S) Settings in ICMTest: Call BSP or WDA application in browser
Step 2: Configure the AS ABAP to support SSL and SNCHelp Portal: SAP Cryptographic LibraryHelp Portal: Secure Connections
Step 3: Configure authenticationHelp Portal: Authentication and Single Sign-On with SAP Business Client
https://<SERVER>:<PORT>/sap/bc/echo
https://<SERVER>:<PORT>/sap/bc/bsp/sap/it00
5) Configure ABAP Back End
19PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
5.1.2 Activate the NWBC server runtime
Activate Business-Client specific ICF servicesHelp Portal: ICF ConfigurationHelp Portal: Active Services in ICF (UI Services)Test: Launch NWBC for HTML (Test the NWBC ICF service in
transaction SICF)
The server runtime is required for transfer of system and user data. The following two server runtimes are available:
• Server runtime for SAP NetWeaver user interface services as of SAP User Interface Add-On 1.0 SPS 04 for SAP NetWeaver and SAP NetWeaver 7.4 SPS 03• Server runtime for SAP Business Client
SAP recommends the use of the server runtime for SAP NetWeaver UI servicesfor the following reasons:• New UI services features can be applied to SAP Business Client• New UIs and latest developments based on SAPUI5 and SAP NetWeaver Gateway
can be used with NWBC• SAP NetWeaver UI services can be supported by the provision of small-sized
support packages• New UI features are shipped with support packages within a few months
5) Configure ABAP Back End
20PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
5.1.3 Make system-specific settings(customizing, and whitelist) 5) Configure ABAP Back End
This is already fine-tuning…
In NWBC customizing, the administrator can for example
• Define a welcome message for the Index page• Specify a themeFor more information, see• Help Portal: Definition of Configuration Parameters in Customizing (server runtime for NW UI services)• Help Portal: Definition of Configuration Parameters with Table NWBC_CFG (server runtime for NWBC)
A whitelist can be defined on top of the Internet Explorer security zone model.For more information, see:• Help Portal: Whitelist• Help Portal: Defining a Whitelist in HTTP_WHITELIST• Help Portal: Security Zones in Internet Explorer
Recommended
5.2 Configuring the AS ABAP back end:Activating the side panel1. Activate the side panel business function
2. Assign side panel roles to users
3. Enable data transfer to side panels
4. Activate SAP GUI scripting
22PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
5.2.1 System settings:Activate side panel business function 1/2
Open the Easy Access Menu and navigate to:
> Tools> ABAP Workbench
> Development> Switch Framework> Business Function
Alternatively, call transaction SFW2.
5) Configure ABAP Back End
23PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Enter business function ERP_CA_SIDEPANELand choose “Activate”
The business function documentation is availablein the SAP Help Portal:
Deutsch / English
5.2.1 System settings:Activate side panel business function 2/2
5) Configure ABAP Back End
24PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
5.2.2 System settings:Assign side panel roles to users 1/3
As of ECC 6.0 SP07, a new generic sidepanel role is available:SAP_BSSP_SIDEPANEL_ALL
To enable the side panels for the users, youmust assign the side panel roles in UserMaintenance (SU01).
5) Configure ABAP Back End
25PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
5.2.2 System settings:Assign side panel roles to users 2/3
Alternatively, assign the user to the role inRole Maintenance (PFCG)
For more information, see the SAP Help Portal:
Deutsch / English
5) Configure ABAP Back End
26PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
5.2.2 System settings:Assign side panel roles to users 3/3
If the SP status is ECC 6.0 SP06 or below,specific roles need to be assigned
For more information, see the SAP Help Portal:
Deutsch → Sidepanel einrichten
English → Setting Up the Side Panel
5) Configure ABAP Back End
27PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
5.2.3 System settings:Enable format conversion for data transfer from canvas to side panels 5) Configure ABAP Back End
Execute HTTP Service HierarchyMaintenance (Transaction SICF)
> Enter Hierarchy Type SERVICE
> Enter Service Path /sap/bc/ui2/nwbc/(server runtime for NW UI services)
> Execute
Ensure that the SICF service nwbc_ext2intresponsible for data format conversion isactive
28PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
5.2.4 System settings:Enable global data transfer to side panels 1/2
1. In Object Navigator (transaction SE80),select Web Dynpro Comp./Intf.WD_GLOBAL_PARAMETERS.
2. Navigate to Web Dynpro applicationWD_GLOBAL_SETTING. Set the focus tothe object and choose Test/Execute (F8).
A browser window opens.
1
2
5) Configure ABAP Back End
29PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
5.2.4 System Settings:Enable global data transfer to side panels 2/2
3. Go to change mode and open section“Side-Panel”.
4. Activate the 2 Web Dynpro parametersWDSIDEPANELREMOTECONSUMERandWDSIDEPANELREMOTEPRODUCER.
5. Save changes.
5) Configure ABAP Back End
3
4
30PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
5.2.5 Activate SAP GUI scripting – approach 1
1. Start the Profile Parameter Maintenance(transaction RZ11).
2. Enter parameter sapgui/nwbc_scripting, andchoose Display.Attention: parameter name is case sensitive!
3. Choose Change Value.
4. Set the value to TRUE and save changes.
5) Configure ABAP Back End
31PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
5.2.5 Activate SAP GUI scripting – alternative approach
1. Start the Profile Parameter Maintenance(transaction RZ11).
2. Enter parameter sapgui/user_scripting andchoose Display.Attention: parameter name is case sensitive!
3. Choose Change Value.
4. Set the value to TRUE and save changes.
5. Repeat for the parametersapgui/user_scripting_set_readonly and setthe value to TRUE.
5) Configure ABAP Back End
33PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Role-based navigation
General– Roles are used to define authorization settings as well
as the navigation structure used by the UI client– Roles match the real life roles that people play within a
work environment
SAP Business Client– The Business Client runtime retrieves all roles
assigned to a specific user and makes the navigationstructure available to the shell
– If the role doesn‘t provide a navigation structure,Business Client uses the SAP Menu
– For Web AS connections, maintain the navigation intransaction PFCG, tab Menu
– A set of attributes specifically dedicated to thenavigation frame presentation has been introduced toPFCG in the last releasesà Other Node Details and Menu Options
§ Help Portal: Role Maintenance in PFCG
6) Define Roles
34PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Role-based navigation – merging of navigation trees
General– If a user has more than one role assigned, the entries in the navigation
tree appear merged as in one role– Two entries that are the same in two roles, appear only once– The role order depends on the sort index defined for the role– Help Portal: Merging of Navigation Trees
Rules– If roles contain identical folders in equal hierarchies, their folder
contents are merged and redundant folders are not visible– Identical folder means that the following attributes are identical:▫ Name of the entry (object field)▫ Level of the entry in the tree▫ Type of the entry (standard entry, side panel or link collection)▫ Referenced entry (for side panel and link collection)
– The entries of the merged folder are sorted according to the sort index,ie. entries from the role with the lower sort index come first
6) Define Roles
35PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Role-based navigation: sort index
ZAP_NWBC_HOMESort index 0 (home role)
ZAP_NWBC_USER_POWERSort index 100
ZAP_NWBC_USER_STANDARDSort index 10
SAP BC 6.0
SAP BC 6.5
6) Define Roles
37PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Documentation
For detailed documentation of the NetweaverBusiness Client please refer to the SAP Help PortalLatest documentation regarding Business Client 6.5see on SAP Business Client Community
SAP Note 2201009 contains details about the patchesfor SAP Business Client
38PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
SAP Business Client Administration Guide (Excerpt 1)
Installation and Client ConfigurationSAP Business Client for Desktop Installationo Installing SAP Business Cliento Windows Terminal Server InstallationAdministrator Configuration
Connection Configurationo SAP UI Landscapeo Migration of Configuration Datao Provision of Administrator Configuration File
SAP Business Client SettingsAdministrator Configuration TipsConfiguring Support InformationUsing SAP Business Client with a Load Balancer
Server ConfigurationServer Runtime for SAP NetWeaver User Interface Serviceso Migrating to the Server Runtime for UI Serviceso Configuring the Server Runtime for UI Services for SAP
Business Cliento HTTP(S) Settings in ICMo Active Services in ICF (UI Services)o Settings for Fully Qualified Domain Nameso Configuring Authentication on the Servero Cockpitso Definition of Configuration Parameters in Customizingo Definition of Configuration Parameters with Table NWBC_CFG
39PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
SAP Business Client Administration Guide (Excerpt 2)
Role Maintenance in PFCGo PFCG Overviewo Navigation Treeo Default Pages and Service Mapso Menuo Search Providerso Side Panelo Remote Systemso Object-Based Navigationo Merging of Navigation Trees
Programming AspectsGenerating an External Startup URL for NWBCIntegrating the Context-Sensitive Side Panel
Security AspectsAuthentication and Single Sign-On with SAP Business Cliento ICF Configurationo Security Zones in Internet ExplorerWhite Listo Enabling Single Sign-On with Secure Login Client for SAP
Business Client
40PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Information on public web
LATEST SAP BC DOWNLOAD
SAP BC COMMUNITY
SAP UI ROADMAP
ENTERPRISE ARCHITECT EXPLORER
SAP LIBRARY DOCUMENTATION
PRODUCT PAGE
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP SE or an SAP affiliate company.
The information contained herein may be changed without prior notice. Some software products marketed by SAP SE and its distributors contain proprietary software componentsof other software vendors. National product specifications may vary.
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or warranty of any kind, and SAP or its affiliatedcompanies shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP or SAP affiliate company products and services are those that areset forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as constituting an additional warranty.
In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or any related presentation, or to develop or releaseany functionality mentioned therein. This document, or any related presentation, and SAP SE’s or its affiliated companies’ strategy and possible future developments, products,and/or platform directions and functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason without notice. Theinformation in this document is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. All forward-looking statements are subject to variousrisks and uncertainties that could cause actual results to differ materially from expectations. Readers are cautioned not to place undue reliance on these forward-looking statements,and they should not be relied upon in making purchasing decisions.
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE (or an SAP affiliate company)in Germany and other countries. All other product and service names mentioned are the trademarks of their respective companies.See http://global.sap.com/corporate-en/legal/copyright/index.epx for additional trademark information and notices.
© 2017 SAP SE or an SAP affiliate company. All rights reserved.
43PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
COMMON CONFIGURATION
PrerequisitesSAP Business Client 5.0 and higherSAP GUI for Windows 7.40 and higherSAP GUI for Java 7.40 and higher
Mandatory for SAP BC, optional for SAP GUI(default with SAP GUI for Windows 7.50)
Configuration based on XML filesAutomatic merge of existing .ini files duringinstallation of SAP Business Client with SAP GUI
SAPUILandscapeGlobal.xml for message server andSAP router informationSAPUILandscape.xml for SAP logon entries
No need to have sapmsXXX ports maintained in/etc/services
Unified SAP UI landscape
SAP UI LANDSCAPE
ADMINCONFIG
USERCONFIG
COMMONCONFIGURATION
45PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Information on public web
LATEST SAP BC DOWNLOAD
SAP BC COMMUNITY
SAP UI ROADMAP
ENTERPRISE ARCHITECT EXPLORER
SAP LIBRARY DOCUMENTATION
PRODUCT PAGE
46PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ
Related SAP notes
2446515 SAP Business Client 6.5: Prerequisites and restrictions2455699 SAP Business Client 6.5: Expected releases
2227396 SAP Business Client 6.0: Prerequisites and restrictions2201009 SAP Business Client 6.0: Patches - client only2227431 SAP Business Client 6.0: Expected releases
Thank you.Contact information:
SAP Business Client Product Management
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP SE or an SAP affiliate company.
The information contained herein may be changed without prior notice. Some software products marketed by SAP SE and its distributors contain proprietary software componentsof other software vendors. National product specifications may vary.
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or warranty of any kind, and SAP or its affiliatedcompanies shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP or SAP affiliate company products and services are those that areset forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as constituting an additional warranty.
In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or any related presentation, or to develop or releaseany functionality mentioned therein. This document, or any related presentation, and SAP SE’s or its affiliated companies’ strategy and possible future developments, products,and/or platform directions and functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason without notice. Theinformation in this document is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. All forward-looking statements are subject to variousrisks and uncertainties that could cause actual results to differ materially from expectations. Readers are cautioned not to place undue reliance on these forward-looking statements,and they should not be relied upon in making purchasing decisions.
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE (or an SAP affiliate company)in Germany and other countries. All other product and service names mentioned are the trademarks of their respective companies.See http://global.sap.com/corporate-en/legal/copyright/index.epx for additional trademark information and notices.
© 2017 SAP SE or an SAP affiliate company. All rights reserved.
Top Related